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AMENDMENTS TO THE SPECIFICATION: 

Page 1, before line 1 and after the title insert: 

BACKGROUND OF THE INVENTION 

1. Field of the Invention ; and 

Page 1, between lines 4 and 5, insert: 

2. Related Art . 

Page 2, before line 1, insert: 

SUMMARY OF THE INVENTION . 

Page 6, between lines 3 and 4, insert: 

BRIEF DESCRIPTION OF THE DRAWINGS 

Page 6, between lines 19 and 20, insert: 

DETAILED DESCRIPTION OF EXEMPLARY EMBODIMENTS 

Please amend the paragraph beginning at page 7, line 17, as follows: 

Prior to commencing a session, a customer terminal 3 may have contracted with the 
operator of the data network 2 for a quality of service (QoS) which requires a specified minimum 
number of ADUs to be delivered per unit time. If subsequently, congestion in the network 2 
causes the rate of ADU delivery to fall below that specified in the contract, then the customer 
terminal 3 requests from the data server 1 a refund of charges for the session. To validate this 
request, the data server 1 requests from the secure module 4 a "receipt". This receipt includes 
the data recorded in the data store and so provides a tamper-proof indication of the number of 
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ADUs decrypted and made available to the customer in the course of a specified session. In 
general, this receipt will only be trusted by the party encrypting the data, not a party such as the 
network operator simply transmitting data encrypted without its knowledge. However, the 
encryption software used by the data source may be certified by a third party trusted by both the 
network provider and the data source. If the decryption software is also certified by this trusted 
third party as described below, it may then sign the receipt on behalf of the trusted third party so 
that the network operator can trust it. 

Please amend the paragraph beginning at page 7, line 33, as follows: 

Figure 2 shows the principal functional components of the customer terminal relevant to 
the present inventi on exe.mp.lary embodiment . A network interface 22 communicates ADUs to 
and from the data network. The ADUs pass from the interface 22 to a secure module 23. The 
secure module 23 has sub-modules comprising a decryption module D a key generation module 
K and a secure store S. The key generation module passes a series of keys to the decryption 
module which decrypts a series of ADUs received from the interface 22 and passes these to an 
application layer module 24. This carries out further processing and passes the resulting data to 
output device, which in this example is a video display unit VDU 25. In a preferred 
implementation, the interface 22 may be embodied in hardware by an ISDN modem and in 
software by a TCP-IP stack. The secure module 23 may be, for example, a smartcard which is 
interfaced to the customer terminal via a PCMCIA socket. Suitable smartcards are available 
commercially from Gemplus and other companies. The smartcard may use one of a number of 
standard data interfaces such as the Java card API (application programmer's interface) of Sun 
Microsystems, or the Microsoft smartcard architecture. Alternatively, the secure module may be 
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embodied by a PCI cryptographic co-processor card such as that available commercially from 
IBM. 

Please amend the paragraph beginning at page 11, line 3, as follows: 

As noted in the introduction above, the ADU's may be decrypted in such a way that at 
each one of a number of customer terminals a different characteristic variation is present in the 
data. This variation may be generated directly in the said step of decrypting the ADUs or a 
watermarked key may be supplied to decrypt the ADU. In this latter case, the characteristic 
variation in the key automatically results in a traceable variation in the data decrypted using the 
key. The use of watermarked keys is described, for example, in Ross Anderson, "Chameleon - 
A New Kind of Stream Cipher Encryption" in Haifa in January 1997. 
<http.//www/cl.cam. ac.uk/ftp/users/rjal4/chameleon.p s .gz 

Please amend the paragraph beginning at page 13, line 30, as follows: 

Related inventions are described in the applicant's co-pending international application 
filed this day, entitled "data communications", (USSN 09/555.929 filed June 6. 2000) 
(Applicant's reference A25728) . 
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